Skip to content
ATR-2026-00106highTool Poisoningexperimental

Schema-Description Contradiction Attack

Detects tools that claim read-only or safe functionality in their description but expose write-capable or dangerous parameters in their schema. This attack technique uses misleading descriptions to pass security review while the actual schema enables destructive operations. Example: a "safe_query" tool claiming "read-only database query" while exposing a "write_mode" parameter defaulting to true.

Severity
high
Category
Tool Poisoning
Scan Target
mcp
Author
ATR Community

Response Actions

alertsnapshot

References

OWASP Agentic
ASI02:2026 - Tool Misuse and ExploitationASI06:2026 - Insufficient Access Controls
OWASP LLM
LLM06:2025 - Excessive Agency